Wordpress

    

I just moved my wordpress site to http2 (via https). Some advice on steps to moving your site ;

• Run it behind nginx + lets encrypt - offload ssl certs and get http2 performance
• Setup nginx default to redirect all http -> https
• update your WordPress site to correct URL (via admin / settings / general)  i.e.
• Run WP plug-in to change all media / links to new https links. Else you get mixed secuirty (some http, some https)
  • I used - https://wordpress.org/plugins/velvet-blues-update-urls/

Previously to take down this wordpress site all you needed to do was hold down F5 for about 20 seconds then the site would take about 5 mins to recover.

There were a few factors causing this and quite a few different methods to solving the problem. Wordpress itself is run on php / apache, apache has an evasive mod which can block certain IPs depending on the defined abusive behavior (typical DDOS attack). Since i like to run a few websites behind a single IP i looked at fixing the issue closer to the perimeter….